Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF961B8ADE2111EF9E1B7B9E762E951A.roa
File: AF961B8ADE2111EF9E1B7B9E762E951A.roa (raw, json)
Hash identifier: 1ixD10wirHKtGxx35CDjV6xK2BlD9hHu1yo/XNYhvMI=
Subject key identifier: 7C:13:5F:6D:80:C4:2C:D1:12:15:71:7D:F8:1B:C1:15:2F:29:4E:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF961B8ADE2111EF9E1B7B9E762E951A.roa
Signing time: Wed 29 Jan 2025 09:16:13 +0000
ROA not before: Wed 29 Jan 2025 09:16:09 +0000
ROA not after: Wed 05 Mar 2025 09:16:09 +0000
asID: 203020
IP address blocks: 154.208.132.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85334 (0x14d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:16:09 2025 GMT
Not After : Mar 5 09:16:09 2025 GMT
Subject: CN=6799f1dd-16fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:9b:25:09:25:fb:0e:04:ca:dd:66:a3:52:
33:ae:f9:de:6b:45:bc:10:0f:a7:99:23:66:28:14:
16:cf:16:37:b2:55:8a:f2:08:9e:ab:2f:ca:60:6a:
41:14:cc:32:f1:7b:89:c2:62:bb:85:db:84:5d:e7:
75:ea:7f:c7:6a:24:c5:72:82:09:75:dc:85:e6:75:
44:18:7a:95:da:c0:56:8b:1e:d5:98:5e:d0:b1:0e:
84:d8:f6:7f:fe:81:5d:b1:31:ad:c4:7c:98:32:d7:
84:27:c2:16:ea:38:27:38:87:e4:0d:a3:63:39:89:
3d:41:42:81:f4:be:43:66:0c:d2:e5:e0:d4:8b:ac:
2e:72:d9:b5:6c:c1:09:71:63:10:79:48:38:f8:eb:
77:49:35:d8:7e:b1:55:45:d6:34:f5:3b:54:18:6f:
5a:36:9a:13:87:e4:53:1f:e1:af:23:8f:f6:70:46:
eb:02:8d:47:af:2e:42:26:91:04:8e:ca:c5:ec:ba:
bb:19:fd:02:ab:80:5e:97:ad:2b:62:66:28:3f:f1:
5e:0a:6f:f9:0f:86:cc:f9:db:01:c0:5a:9c:01:d5:
67:9e:33:8c:04:cb:d4:8c:4a:8d:5c:a7:b8:bb:0a:
20:31:5d:fd:be:ae:61:42:ab:78:4b:42:a0:4f:8c:
30:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:13:5F:6D:80:C4:2C:D1:12:15:71:7D:F8:1B:C1:15:2F:29:4E:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF961B8ADE2111EF9E1B7B9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.132.0/22
Signature Algorithm: sha256WithRSAEncryption
95:fb:2e:f0:c5:66:8d:69:33:13:b4:37:2c:43:55:4e:f2:c3:
5c:6e:2c:a6:56:37:6b:01:ed:7b:7f:4a:5f:68:69:fd:c0:be:
90:86:48:bf:15:4d:40:16:f9:91:ca:94:77:9e:b5:5a:a1:12:
95:58:b1:d9:37:36:45:74:67:51:ec:c8:6b:d8:e5:e8:6d:d8:
93:59:c4:18:a3:1f:ca:3f:aa:7d:56:62:84:06:09:e4:25:eb:
a6:ce:12:62:d3:66:52:fc:3b:32:49:5c:f0:6a:81:34:c8:78:
a8:db:9c:8d:31:14:15:e7:78:0d:9d:37:e7:56:0b:05:d2:3b:
a6:ee:2c:1e:87:fe:40:27:d8:f9:b8:9f:f2:f7:b7:10:2f:31:
9c:95:f3:5c:08:d8:9e:f6:95:dd:a4:9f:b1:d0:d6:60:2e:bc:
79:e8:09:c1:28:58:10:99:79:4a:63:4a:28:85:94:2a:2b:e6:
1d:d7:19:4f:85:da:4a:e1:1a:9b:f7:74:c8:7e:f6:f6:ed:b3:
71:9c:53:93:68:5d:57:2e:fe:c9:88:ef:5f:7f:2f:ee:64:f6:
e9:79:ed:54:41:fe:45:d1:42:92:ec:51:cc:60:b6:8e:e2:0b:
e6:b5:cd:a6:ff:fc:4e:57:d1:17:31:53:a7:e5:61:e6:39:4e:
1d:67:66:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:43:08 2025 by rpki-client